{
 "slug": "ghost",
 "name": "Ghost",
 "tagline": "Publishing platform for newsletters, blogs and paid memberships",
 "category": "cms-ecommerce",
 "use_cases": [
  "blog",
  "newsletters",
  "memberships"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Ghost Foundation",
  "url": "https://ghost.org",
  "license": "MIT",
  "license_url": "https://github.com/TryGhost/Ghost/blob/main/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "6.72.0",
   "last_build": "2026-10-23",
   "entity_id": "prod-dcpo3yh5qzhd6",
   "ami_alias": "/aws/service/marketplace/prod-dcpo3yh5qzhd6/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-gzineqrdsjsv2",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "6.67.0",
   "last_build": "2026-10-02",
   "offer_id": "ghost",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:ghost:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.ghost?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/ghost/",
  "json": "https://lynxroute.com/products/ghost/product.json"
 },
 "release_notes": [
  {
   "version": "6.72.0",
   "title": "Ghost 6.72.0",
   "notes": "* Ghost updated 6.67.0 -> 6.72.0. MIT unchanged; database migrations run automatically on upgrade\n* Rebuilt Admin interface (posts list, editor and settings), member location maps, Stripe Checkout customisation and editor font options\n* Fixes a scheduled-post publishing race and a paid-signup issue\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23"
   }
  },
  {
   "version": "6.67.0",
   "title": "Ghost 6.67.0",
   "notes": "* Ghost 6.67.0 on Ubuntu 24.04 LTS (Node.js 22 + bundled MySQL 8.0) - version update from 6.64.0, also covering 6.65.0 (upstream 6.66.0 was never published; its changes are included here). MIT unchanged\n* Bundled themes refreshed to Source 1.7.6 and Casper 5.12.5\n* Fixes comment visibility on members-only posts, incomplete subscriptions being counted as paid conversions, and crashes when a subscription's member or paid tier is missing\n* Fixes post history crashing for posts without revisions, importing posts with empty content, and repeated Stripe portal configuration errors\n* Faster and lighter sitemap rebuilds on sites with many posts; database updates for this version are applied automatically on start\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-02",
    "azure": "2026-10-02"
   }
  },
  {
   "version": "6.64.0",
   "title": "Ghost 6.64.0",
   "notes": "* Ghost 6.64.0 on Ubuntu 24.04 LTS (Node.js 22 + bundled MySQL 8.0) - version update from 6.63.0. MIT unchanged\n* Bundled Source theme refreshed to 1.7.5\n* Fixes members being subscribed to every newsletter when choosing none, settings imports overwriting protected core settings, and missing audit log entries for staff token changes\n* Fixes email rendering for posts containing malformed CSS, and navigation icons not saving on self-hosted installs\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-16",
    "azure": "2026-09-17"
   }
  },
  {
   "version": "6.63.0",
   "title": "Ghost 6.63.0",
   "notes": "* Ghost 6.63.0 on Ubuntu 24.04 LTS (Node.js 22 + bundled MySQL 8.0) - version update from 6.62.0. MIT unchanged\n* Bundled Source theme refreshed to 1.7.4; Casper stays at 5.12.3\n* Node.js 24 added to the supported engines range, so the image is ready for a future runtime move - Node.js 22 remains fully supported\n* Fixes Portal reporting a refused plan change as a successful one, and account preferences failing to save for some members\n* Fixes tag results in admin search not opening the tag, LinkedIn company and school URLs with underscores being rejected, and focus handling when adding a filter\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-11",
    "azure": "2026-09-13"
   }
  },
  {
   "version": "6.62.0",
   "title": "Ghost 6.62.0",
   "notes": "* Ghost 6.62.0 on Ubuntu 24.04 LTS (Node.js 22 + bundled MySQL 8.0) - version update from 6.59.0. MIT unchanged\n* Bundled themes refreshed: Source 1.7.3 and Casper 5.12.3\n* Adds email-able gift subscriptions with Portal gift links, new analytics fields on the automations list, and the redesigned tag details screen\n* Fixes unsubscribe links acting on the wrong member for a signed-in reader, inflated post counts on tags, dropped newsletter recipients when batch creation is interrupted, and unsafe notification markup\n* Fixes the private-site landing page for signed-in members, stale sidebar selections in Admin, and duplicate requests for the dimensions of the same image\n* Automatic database migration handled by Ghost-CLI\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-06",
    "azure": "2026-09-09"
   }
  },
  {
   "version": "6.59.0",
   "title": "Ghost 6.59.0",
   "notes": "* Ghost 6.59.0 on Ubuntu 24.04 LTS (Node.js 22 + bundled MySQL 8.0) - version update from 6.57.1. MIT unchanged\n* Bundled themes refreshed: Source 1.7.2 and Casper 5.12.2\n* Fixes migrations failing on MySQL older than 8.0.28, navigation markup changing for themes without the icons flag, and header-card asset exclusions\n* Fixes negated newsletter filters being read as their opposite, and donation checkout failing when the note label translation is too long\n* Automatic database migration handled by Ghost-CLI\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-08-23"
   }
  },
  {
   "version": "6.57.1",
   "title": "Ghost 6.57.1",
   "notes": "* Ghost 6.57.1 on Ubuntu 24.04 LTS (Node.js 22 + bundled MySQL 8.0) - version update from 6.54.0. MIT unchanged\n* Fixes in this update: the member.edited webhook now fires on cancellation and reinstatement of paid plans, admin toolbar redirect loops on subdirectory sites, theme settings being reset when editing Source or Casper, missing tiers in the previous part of a webhook payload, and contrast_text_color returning the wrong text colour on some light backgrounds\n* Member labels and complimentary subscriptions, plus Gravatar member avatars available to themes\n* Inline editing of routes.yaml and redirects.yaml from the admin area\n* Posts can be created from HTML input; member CSV import fixes (comma-separated labels, formula-escape characters, uneven columns)\n* Admin UI fixes: dark-mode loader, theme toggle crossfade, YouTube bookmark metadata, audio duration after HTML import\n* Automatic database migration handled by Ghost-CLI\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-08-18",
    "azure": "2026-08-19"
   }
  },
  {
   "version": "6.54.0",
   "title": "Ghost 6.54.0",
   "notes": "* Ghost 6.54.0 on Ubuntu 24.04 LTS (Node.js 22 + bundled MySQL 8.0) - version update from 6.53.0. MIT unchanged\n* Member labels and complimentary subscriptions, plus Gravatar member avatars available to themes\n* Inline editing of routes.yaml and redirects.yaml from the admin area\n* Posts can be created from HTML input; member CSV import fixes (comma-separated labels, formula-escape characters, uneven columns)\n* Admin UI fixes: dark-mode loader, theme toggle crossfade, YouTube bookmark metadata, audio duration after HTML import\n* Automatic database migration handled by Ghost-CLI\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-07-24",
    "azure": "2026-07-27"
   }
  },
  {
   "version": "6.53.0",
   "title": "Ghost 6.53.0",
   "notes": "* Ghost 6.53.0 on Ubuntu 24.04 LTS (Node.js 22 + bundled MySQL 8.0) - version update from 6.52.1. MIT unchanged\n* Enhanced spam protection for member signups\n* Analytics chart bucketing refinements and bug fixes\n* Automatic database migration handled by Ghost-CLI\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-07-20",
    "azure": "2026-07-20"
   }
  },
  {
   "version": "6.52.1",
   "title": "Ghost 6.52.1",
   "notes": "* Ghost 6.52.1 on Ubuntu 24.04 LTS (Node.js 22 + bundled MySQL 8.0) - version update from 6.45.0. MIT unchanged\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-07-11",
    "azure": "2026-07-11"
   }
  },
  {
   "version": "6.45.0",
   "title": "Ghost 6.45.0 - Initial release (June 2026)",
   "notes": "* Ghost 6.45.0 on Ubuntu 24.04 LTS (Node.js 22 + bundled MySQL 8.0)\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Unique MySQL database password generated at first boot\n* TLS terminated by nginx on 443; Ghost bound to 127.0.0.1:2368 only\n* Bundled MySQL 8.0 bound to 127.0.0.1 only\n* Site owner account created on first visit to the admin panel (no pre-seeded admin)\n* Update-check telemetry disabled\n* UFW firewall pre-configured (ports 22, 80, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-22"
   }
  }
 ],
 "release_history": [
  {
   "version": "6.72.0",
   "aws": "2026-10-23"
  },
  {
   "version": "6.67.0",
   "aws": "2026-10-02",
   "azure": "2026-10-02"
  },
  {
   "version": "6.64.0",
   "aws": "2026-09-16",
   "azure": "2026-09-17"
  },
  {
   "version": "6.63.0",
   "aws": "2026-09-11",
   "azure": "2026-09-13"
  },
  {
   "version": "6.62.0",
   "aws": "2026-09-06",
   "azure": "2026-09-09"
  },
  {
   "version": "6.59.0",
   "aws": "2026-08-23"
  },
  {
   "version": "6.57.1",
   "aws": "2026-08-18",
   "azure": "2026-08-19"
  },
  {
   "version": "6.54.0",
   "aws": "2026-07-24",
   "azure": "2026-07-27"
  },
  {
   "version": "6.53.0",
   "aws": "2026-07-20",
   "azure": "2026-07-20"
  },
  {
   "version": "6.52.1",
   "aws": "2026-07-11",
   "azure": "2026-07-11"
  },
  {
   "version": "6.45.0",
   "aws": "2026-06-22"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-dcpo3yh5qzhd6/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer ghost --plan payg-gen2\naz vm create -g my-rg -n ghost --size Standard_D2s_v3 \\\n  --image lynxroute:ghost:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Ghost is an open-source professional publishing platform from the Ghost Foundation, built as a Node.js application. It provides a clean writing and editing experience, customizable themes and templating, native membership and subscription management, email newsletters, SEO controls, and a full Content API and Admin API plus webhooks for integrations. Content, settings, and members are persisted in a MySQL 8.0 database; images and themes live on the local filesystem. Ghost is a self-hosted alternative to hosted publishing and newsletter services, with no per-seat fees and no vendor lock-in. This image runs Ghost on Node.js 22 with a bundled MySQL 8.0 database. MIT license. Ghost is a trademark of the Ghost Foundation; this independently hardened image is not affiliated with or endorsed by the Ghost Foundation.",
  "image_adds": "Security hardening:\n* Unique MySQL database password generated per instance at first boot\n* TLS terminated at nginx on 443; Ghost bound to 127.0.0.1:2368 only - never exposed directly\n* Bundled MySQL 8.0 bound to 127.0.0.1 only\n* Owner account created on first visit to the admin panel - you choose the email and password; no pre-seeded administrator credential is shipped\n* Update-check telemetry disabled\n* UFW firewall - ports 22 (SSH), 80 (HTTP redirect plus certificate validation), and 443 (HTTPS) only\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}